CVE-2021-3520
CriticalAdvisory
Published 30 Apr 2021In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 751
- of 17,781 indexed, latest versions
- Container images
- 553
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: lz4 security update
Carried by container images the latest versions of 751 of 17,781 indexed charts deploy, on 553 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| lz4deb | 0.0~r131-2+b1, 0.0~r131-2ubuntu2, 0.0~r131-2ubuntu3, 1.8.3-1+1 more | 0.0~r131-2+deb9u1, 0.0~r131-2ubuntu2+esm1, 0.0~r131-2ubuntu3.1, 1.8.3-1+deb10u1+1 more | 509 |
| lz4apk | 1.9.2-r0, 1.9.3-r0 | 1.9.2-r1, 1.9.3-r1 | 5 |
| lz4rpm | 1.8.0-3.5.1, 1.8.0-lp151.3.3.1, 1.8.1.2-4.el8, 1.8.3-2.el8 | 0:1.8.3-3.el8_4, 1.8.0-3.8.1, 1.9.3-2.1 | 39 |
- OSV records
- ALPINE-CVE-2021-3520UBUNTU-CVE-2021-3520RHSA-2021:2575DLA-2657-1DSA-4919-1openSUSE-SU-2024:11562-1SUSE-SU-2021:1647-1
- Also known as
- USN-4968-1, USN-4968-2
Charts affected
751 by stars
Container images carrying it
553 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| istio/ | 22a0410f35a8 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| istio/ | 09b9d6958a13 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| istio/ | eb0f1a725ca8 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| istio/ | 40e8aba77c1b | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| istio/ | ee156b8aefd6 | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| istio/ | e86d247b7ac2 | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| istio/ | eab80bcd2132 | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| istio/ | 1e37fca43550 | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| istio/ | e454cab754cf | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| istio/ | dbb7726d1bf0 | lz4 | 0.0~r131-2ubuntu3.1 | 2 |
| larribas/ | 05ccb0b46bfb | lz4 | 1.8.3-1+deb10u1 | 2 |
| library/ | 5aa8400b4b3b | lz4 | 0.0~r131-2ubuntu3.1 | 2 |
| library/ | 58b25d51baa1 | lz4 | 0.0~r131-2ubuntu3.1 | 2 |
| library/ | 32f9d9a069f7 | lz4 | 1.8.3-1+deb10u1 | 2 |
| library/ | 9643e9fbd633 | lz4 | 1.8.3-1+deb10u1 | 2 |
| library/ | 6fff55753e3b | lz4 | 1.8.3-1+deb10u1 | 2 |
| library/ | b1d09e971889 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| library/ | b3770d9c4ef1 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| library/ | 1f1a2d56de1d | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| library/ | 80ad2170ad62 | lz4 | 1.8.3-1+deb10u1 | 2 |
| lightstep/ | 11c5569aaf3b | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| martinaif/ | 43bc40a3da0e | lz4 | 1.8.3-1+deb10u1 | 2 |
| martinaif/ | f07fbe15e5b5 | lz4 | 1.8.3-1+deb10u1 | 2 |
| mesosphere/ | 073db43d0b8b | lz4 | 1.9.2-2ubuntu0.20.04.1 | 2 |
| nachomillangarcia/ | e4ce056f2d6d | lz4 | 0.0~r131-2+deb9u1 | 2 |
| ncsa/ | abf6300b57b7 | lz4 | 1.8.3-1+deb10u1 | 2 |
| neilpeterson/ | 84062718347c | lz4 | 0.0~r131-2+deb9u1 | 2 |
| ngick8stesting/ | 1e764eab77b4 | lz4 | 0.0~r131-2ubuntu3.1 | 2 |
| omecproject/ | cfdb566dd949 | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| openmf/ | 496b60a51f28 | lz4 | 1.8.3-1+deb10u1 | 2 |
| osixia/ | ccd95cc6e61e | lz4 | 1.8.3-1+deb10u1 | 2 |
| osixia/ | d212a12aa728 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| radondb/ | 801ef77b5b87 | lz4 | 1.8.3-1+deb10u1 | 2 |
| radondb/ | bcfb7f67c6f5 | lz4 | 1.8.3-1+deb10u1 | 2 |
| rodolpheche/ | 3be08a386092 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| solsson/ | 6f82e2b0464f | lz4 | 0.0~r131-2+deb9u1 | 2 |
| statsd/ | dab129e74c25 | lz4 | 0.0~r131-2+deb9u1 | 2 |
| ujamii/ | 6243197349e1 | lz4 | 1.8.3-1+deb10u1 | 2 |
| weblate/ | 69c160d37a3c | lz4 | 1.8.3-1+deb10u1 | 2 |
| gcr.io/ | fbe12aa24de6 | lz4 | 0.0~r131-2ubuntu2+esm1 | 2 |
| ghcr.io/ | 4ee0764310e7 | lz4 | 0.0~r131-2ubuntu3.1 | 2 |
| quay.io/ | d8c631a6dc43 | lz4 | 0:1.8.3-3.el8_4 | 2 |
| a10networks/ | 8dc58d434d71 | lz4 | 0.0~r131-2ubuntu3.1 | 1 |
| aaionap/ | 89c1078a1b23 | lz4 | 0.0~r131-2+deb9u1 | 1 |
| adferrand/ | 6fea97b02758 | lz4 | 1.9.2-r1 | 1 |
| adwerx/ | 840d2b078682 | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| aerospike/ | 5bec98d46c8a | lz4 | 0.0~r131-2+deb9u1 | 1 |
| afrank/ | d463c37b08d7 | lz4 | 1.8.3-1+deb10u1 | 1 |
| airsonicadvanced/ | f7cbafac2806 | lz4 | 1.9.2-2ubuntu0.20.04.1 | 1 |
| alphayax/ | c284977f027a | lz4 | 0.0~r131-2+deb9u1 | 1 |